Risk analysis and assessment of information resoursces in fuzzy conditions

Authors

  • Світлана Володимирівна Казмірчук Національний авіаційний університет

DOI:

https://doi.org/10.18372/2410-7840.15.4778

Keywords:

risk, risk analysis, risk assessment, system of risk analysis and assessment, risk parameters, method

Abstract

The construction of information security management system requires providing the analysis and security risk assessment that are often characterized by high fuzzy conditions. The existing assessment tools do not provide opportunities for risk analysis and risk assessment of a wide range of initial parameters. On the basis of the proposed risk analysis and assessment method it was implemented an appropriate software system.  It allows making assessment in fuzzy conditions using the established assessment components, which are displayed by the model of the integrated concept of risk parameters and can be represented in both numerical and linguistic forms. To verify the developed software product it was implemented the modeling under a number of different environmental conditions. The received results confirm the adequacy of software response on value changes of estimated component under different environment conditions, while the risk value does not change significantly when the basis of estimated components is changed.

 

Author Biography

Світлана Володимирівна Казмірчук, Національний авіаційний університет

PhD in Eng., Associate Professor of Academic Department of IT-Security, National Aviation University (Kyiv, Ukraine).

References

Корченко А.Г. Интегрированное представление параметров риска / Корченко А.Г., Иванченко Е.В., Казмирчук С.В. // Защита информации – 2011. – №1 (50). – С. 96-101.

Корченко А.Г. Методология синтеза систем анализа и оценки риска потерь информационных ресурсов / Корченко А.Г., Казмирчук С.В. // Защита информации – 2012. – №2. – С. 24-28.

Корченко А.Г. Методы анализа и оценки рисков потерь государственных информационных ресурсов / Корченко А.Г., Щербина В.П., Казмирчук С.В. // Защита информации – 2012. – №1. – С. 126-139.

Корченко А.Г. Системы анализа и оценки риска потерь государственных информационных ресурсов / Корченко А.Г., Волянская В.В., Казмирчук С.В., Охрименко А.А. // Защита информации – 2012. – №2. – С. 52-58.

Луцкий М.Г. Исследование программных средств анализа и оценки риска информационной безопасности / Луцкий М.Г., Корченко А.Г., Иванченко Е.В., Казмирчук С.В. // Защита информации – 2011. – №3. – С. 97-108.

Луцкий М.Г. Современные средства управления информационными рисками / Луцкий М.Г., Иванченко Е.В., Корченко А.Г., Казмирчук С.В., Охрименко А.А. // Защита информации – 2012. – №1. – С. 5-16.

НД ТЗІ 1.4-001-2000 Типове положення про службу захисту інформації в автоматизованій системі. Затверджено наказом ДСТСЗІ СБ України від 04 грудня 2000 р. № 53.

ISO/IEC 27002:2005 Информационные технологии. Свод правил по управлению защитой информации c учетом Технической поправки 1, опубликованной 2007-07-01.

Korchenko A.G., Ivanchenko Ye.V., Kazmirchuk S.V. Integrated view of risk characteristic, Zahist ìnformacìï, 2011, №1 (50), pp. 96-101.

Korchenko A.G., Kazmirchuk S.V. The synthesis methodology of analysis systems and risk assessment of information resources losses, Zahist ìnformacìï, 2012, №2, pp. 24-28.

Korchenko A.G. Risk analysis and assessment methods of government information resources losses / Korchenko A.G., Sherbina V.P., Kazmirchuk S.V. // Zahist ìnformacìï, 2012, №1, pp. 126-139.

Korchenko A.G., Volyanskaya V.V., Kazmirchuk S.V., Okhrimenko A.A.Systems analysis and risk assessment of Government Information Resources losses, Zahist ìnformacìï, 2012, №2, pp. 52-58.

Lutskiy M.G., Korchenko A.G., Ivanchenko Ye.V., Kazmirchuk S.V. Research of information security risk & analysis assessment software, Zahist ìnformacìï, 2011, №3, pp. 97-108.

Lutskiy M.G., Ivanchenko E.V., Korchenko A.G., Kazmirchuk S.V., Okhrimenko A.A. Modern techniques of Information Risk Management, Zahist ìnformacìï, 2011, №1, pp. 5-16.

ND TZÍ 1.4-001-2000 Typical regulations on data protection agencies in the automated system.

ISO/IEC 27002:2005 Information technology – Security techniques – Code of practice for information security management.

Downloads

Published

2013-06-13

How to Cite

Казмірчук, С. В. (2013). Risk analysis and assessment of information resoursces in fuzzy conditions. Ukrainian Information Security Research Journal, 15(2), 133–140. https://doi.org/10.18372/2410-7840.15.4778

Issue

Vol. 15 No. 2 (2013)

Section

Articles

License

The scientific journal adheres to the principles of Open Access and provides free, immediate, and permanent access to all published materials without financial, technical, or legal barriers for readers.

All articles are published in Open Access under the Creative Commons Attribution 4.0 International (CC BY 4.0) license.

Copyright

Authors who publish their works in the journal:

  • retain the copyright to their publications;

  • grant the journal the right of first publication of the article;

  • agree to the distribution of their materials under the CC BY 4.0 license;

  • have the right to reuse, archive, and distribute their works (including in institutional and subject repositories), provided that proper reference is made to the original publication in the journal.